Establishes the Washington privacy act.

Addresses the processing of personal data by controllers or processors; facial recognition for profiling; the state's citizens right to privacy; transparency; exemptions; liability; and enforcement.

Prohibits state and local government agencies from using facial recognition technology to engage in ongoing surveillance of specified individuals in public spaces, unless it is in support of law enforcement activities.

Requires the office of privacy and data protection to conduct an analysis on the public sector use of facial recognition and submit a report of its findings to the appropriate legislative committees.